CVE-2023-44284
EUVD-2023-4864014.12.2023, 16:15
Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an SQL Injection vulnerability. A remote low privileged attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the application's backend database causing unauthorized read access to application data.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| dell | powerprotect_data_protection | 𝑥 < 2.7.6 |
| dell | apex_protection_storage | 𝑥 < 6.2.1.110 |
| dell | apex_protection_storage | 7.0 ≤ 𝑥 < 7.10.1.15 |
| dell | powerprotect_data_domain | 𝑥 < 6.2.1.110 |
| dell | powerprotect_data_domain | 7.0 ≤ 𝑥 < 7.12.0.0 |
| dell | powerprotect_data_domain_management_center | 𝑥 < 6.2.1.110 |
| dell | powerprotect_data_domain_management_center | 7.0 ≤ 𝑥 < 7.13.0.10 |
| dell | emc_data_domain_os | 𝑥 < 6.2.1.110 |
| dell | emc_data_domain_os | 7.0 ≤ 𝑥 < 7.12.0.0 |
| dell | emc_data_domain_os | 7.7 ≤ 𝑥 < 7.7.5.25 |
| dell | emc_data_domain_os | 7.10 ≤ 𝑥 < 7.10.1.15 |
| dell | powerprotect_data_domain_management_center | 7.7 ≤ 𝑥 < 7.7.5.25 |
| dell | powerprotect_data_domain_management_center | 7.10 ≤ 𝑥 < 7.10.1.15 |
𝑥
= Vulnerable software versions
References